$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa File: c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa (raw, json) Hash identifier: YPNvgNidKSYOav49TzbxJ+rnC5UcTSlVe6v4fGqcD74= Subject key identifier: 33:50:B1:E2:BF:97:8D:E4:66:2B:82:D4:C4:5A:65:09:61:F0:7E:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8C2AA8445089C6DC210AD180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 397202 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a8:44:50:89:c6:dc:21:0a:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=28e14ddc-07da-420c-a206-1ef5df5e303e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:82:fb:de:21:11:36:ff:a1:3f:24:7a:71: b7:a9:84:0a:56:51:5f:5a:af:48:ac:41:5e:eb:6b: 9e:72:a5:5e:2f:cd:70:dc:d7:03:b7:fd:6d:44:af: 70:aa:8b:8f:4e:8b:45:ca:1b:d9:79:e3:9c:f0:cb: 92:17:d1:62:33:5b:d2:91:58:cf:6e:6d:30:57:7c: c1:4f:ec:cc:d8:c9:29:ac:1f:90:68:ec:98:17:c9: f1:e3:fb:84:f9:e0:27:64:a0:21:79:8e:f7:d5:f7: 5d:52:dd:f9:08:f7:e8:52:d0:b1:47:46:73:75:9c: 4e:7e:ac:8d:a1:79:d3:be:07:0a:02:87:1f:ed:a3: 8c:11:12:8c:8b:38:af:7d:09:bb:4d:6e:45:f1:86: ff:69:3c:4c:61:20:a5:77:f3:69:7d:36:18:1e:73: d1:50:03:63:0b:46:78:28:03:8d:82:19:21:0f:69: 9c:08:d1:25:47:c2:02:22:f7:e2:09:08:70:e5:75: 9c:07:b7:1e:a2:20:81:58:65:59:b5:f2:7a:bf:5b: 4c:c6:ce:a9:9e:c8:a0:2e:fa:62:ea:da:ce:16:3b: 65:9d:ae:67:4f:c2:49:e1:35:42:02:f3:0b:97:ca: b0:85:cc:d7:e7:d2:9f:8a:76:39:9d:dd:e3:07:90: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:50:B1:E2:BF:97:8D:E4:66:2B:82:D4:C4:5A:65:09:61:F0:7E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1955a7a-9049-33f2-8d2c-3d6d014e4490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:82:a9:16:a1:ad:ff:2a:fc:81:82:a5:f5:48:32:64:64:67: 86:57:bb:15:b5:ea:d1:f3:c4:ed:cd:a8:a9:e1:95:45:5d:dd: e5:c9:08:8d:46:e8:ed:40:5b:22:e5:82:1e:5f:ae:9b:38:43: 7b:b6:7e:20:5c:61:24:04:04:2e:02:f9:e7:41:ed:1f:8a:1d: a5:13:e6:6a:76:99:08:01:9d:9e:00:59:65:58:d4:fa:2c:65: cc:3c:16:53:76:2a:dc:e0:18:b4:27:50:36:50:48:46:4e:d1: be:4b:d5:e6:cd:f8:79:3c:92:73:11:25:24:0d:70:88:6e:32: f0:63:8e:26:f2:7a:59:11:46:b1:be:d4:e6:53:4d:ef:2f:d7: ba:ca:b4:2d:c5:27:c0:f9:81:a8:e9:bc:fc:27:9e:99:c5:dc: 05:70:c9:02:0a:78:4e:3b:16:79:c5:cc:15:76:e9:f5:17:a6: 07:1a:b6:5e:bb:77:86:bd:ea:9c:3c:c0:b4:b2:b0:55:cb:bc: 26:17:19:c4:06:25:69:ed:c9:a6:07:63:d9:1a:e8:9f:91:a3: 94:c6:ca:26:ca:dd:35:50:44:c1:88:bc:53:27:a8:22:b0:82: 7c:97:a8:46:69:44:f6:e2:9d:6e:2c:31:17:a4:68:b2:48:b8: a4:74:d4:fa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2MKqhEUInG3CEK0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MjhlMTRkZGMtMDdkYS00MjBjLWEyMDYtMWVmNWRmNWUzMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLmC+94hETb/oT8kenG3qYQKVlFfWq9IrEFe 62uecqVeL81w3NcDt/1tRK9wqouPTotFyhvZeeOc8MuSF9FiM1vSkVjPbm0wV3zB T+zM2MkprB+QaOyYF8nx4/uE+eAnZKAheY731fddUt35CPfoUtCxR0ZzdZxOfqyN oXnTvgcKAocf7aOMERKMizivfQm7TW5F8Yb/aTxMYSCld/NpfTYYHnPRUANjC0Z4 KAONghkhD2mcCNElR8ICIvfiCQhw5XWcB7ceoiCBWGVZtfJ6v1tMxs6pnsigLvpi 6trOFjtlna5nT8JJ4TVCAvMLl8qwhczX59KfinY5nd3jB5DqGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDNQseK/l43kZiuC1MRaZQlh8H6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzE5NTVhN2EtOTA0OS0z M2YyLThkMmMtM2Q2ZDAxNGU0NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCngqkWoa3/KvyBgqX1SDJkZGeGV7sVterR88Tt zaip4ZVFXd3lyQiNRujtQFsi5YIeX66bOEN7tn4gXGEkBAQuAvnnQe0fih2lE+Zq dpkIAZ2eAFllWNT6LGXMPBZTdirc4Bi0J1A2UEhGTtG+S9Xmzfh5PJJzESUkDXCI bjLwY44m8npZEUaxvtTmU03vL9e6yrQtxSfA+YGo6bz8J56ZxdwFcMkCCnhOOxZ5 xcwVdun1F6YHGrZeu3eGveqcPMC0srBVy7wmFxnEBiVp7cmmB2PZGuifkaOUxsom yt01UETBiLxTJ6gisIJ8l6hGaUT24p1uLDEXpGiySLikdNT6 -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:54 2026 by rpki-client